I have an Ubuntu Server 18.04 domain member joined to Active Directory. Everything is working well, except for getting the AD User must change password at next login setting to be respected.

Active Directory Users and Computers Reset Password dialog

I want to force new users to change their temporary passwords upon first login, and this checkbox seems like the easiest way to do that. But when new users login, nothing happens. They just enter the session as normal and are not asked to make a new password.

I feel like there is a PAM setting for this, but I haven't been able to find it.

| improve this question | | | | |
  • Linux certainly supports this. How did you join the server to the domain? – Michael Hampton Sep 12 '18 at 16:08

I believe you need a tools like sssd to pass AD Password Policy or other AD GPO to linux clients. It is available on Ubuntu and almost all linux distros.

You can read more about this in the ubuntu site about SSSD and Active Directory.

| improve this answer | | | | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.